Products: 3
Vulnerabilities: 4
Known Exploited: 0
0
Critical Level Threats
1
High Level Threats
3
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-18983
One User Avatar | User Profile Picture <= 2.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter
Last Modified: Aug 28, 2026
Published: Aug 28, 2026
CVE-2021-24675
One User Avatar < 2.3.7 - Avatar Update via CSRF
Last Modified: Nov 21, 2024
Published: Oct 18, 2021
CVE-2021-24672
One User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting
Last Modified: Nov 21, 2024
Published: Oct 18, 2021
CVE-2011-3860
Cross-site scripting (XSS) vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
Last Modified: Apr 11, 2025
Published: Sep 28, 2011
Items Per Page
